Last updated: July 2026
Privacy Policy
1. Who is responsible for your data
The person responsible ("controller") is:
André Dias
https://learn.diasandnights.com/
Contact email: andredias@diasandnights.com
Country: Spain
2. What data we collect
When you submit the enquiry form, we collect:
- Your name
- Your email
- Your preferred language
- The learning subject
- A message with your goals and level
- Your general availability
3. Why we collect your data
Your data is used only to:
- Receive and respond to your enquiry
- Understand your requested subject and level
- Arrange an introductory conversation
- Prevent spam and misuse
- Maintain correspondence about your enquiry
Your data is not used for newsletters or unrelated marketing.
4. Legal basis
We process your data based on:
- Steps at your request before a possible service agreement — you contacted us voluntarily about classes.
- Legitimate interest in preventing spam and protecting the form.
The consent checkbox confirms you understand your data will be used to respond to your enquiry. It is not marketing consent.
5. Formspree — form processing
Enquiries are processed using Formspree:
- Your data is transmitted to Formspree for processing.
- Formspree forwards it to the configured email.
- Formspree acts as a data processor.
Review Formspree's privacy information:
For international transfers, Formspree relies on Standard Contractual Clauses.
6. How long we keep your data
We retain your enquiry data only as long as needed to:
- Respond to your request
- Maintain relevant correspondence
- Meet legal obligations
12 months
7. Who has access
Your data may be accessed by:
- André Dias, as controller, to respond.
- Formspree, as form processor.
- The email provider receiving enquiries.
- Hosting providers only for server logs.
GitHub Pages and static hosting do not store form submissions.
8. Your rights
Under applicable data protection law (including GDPR):
- Access — request a copy of your data.
- Rectification — correct inaccurate data.
- Erasure — request deletion.
- Restriction — limit processing.
- Objection — object to legitimate interest processing.
- Portability — request your data in a structured format.
- Withdraw consent — where processing is consent-based.
You may lodge a complaint with the relevant supervisory authority.
Agencia Española de Protección de Datos (AEPD)
10. Minors
The contact form should not be submitted by a child without parent/guardian involvement or authorisation. We do not knowingly collect data from children through this form without appropriate consent.
11. Security
We take reasonable measures to protect your data:
- HTTPS encryption in production
- Limited access to enquiries
- Spam controls
- Trusted external processors
No electronic transmission or storage is completely secure.